Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: Bnj48AA+xFffk8vBOdBEMObeZxwu3TgZM1HuojqlpW0=
Subject key identifier: D0:7F:87:F5:E0:F4:12:89:80:0E:67:80:3A:F8:A1:0E:47:9B:C1:6A
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 019873E275CB8186D58D491F5A94A3F701F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 1038
Signing time: Mon 04 Aug 2025 07:01:17 +0000
Manifest this update: Mon 04 Aug 2025 07:01:17 +0000
Manifest next update: Tue 05 Aug 2025 07:01:17 +0000
Files and hashes: 1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: KAKLkANJ/Gdvu7gVQFPu1aYLzwq2Tdjr10K2N1z6z08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:75:cb:81:86:d5:8d:49:1f:5a:94:a3:f7:01:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Aug 4 07:01:17 2025 GMT
Not After : Aug 5 07:01:17 2025 GMT
Subject: CN=d07f87f5e0f41289800e67803af8a10e479bc16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:df:56:8d:28:57:25:93:86:b3:51:23:43:
67:7e:15:d0:52:a7:e8:8d:ae:44:94:68:0f:7d:04:
74:33:13:96:2b:d7:5d:34:7b:ce:b2:fa:2e:25:02:
f8:51:4e:47:ee:e6:19:f1:88:18:50:7b:b0:aa:62:
9a:19:e3:54:68:c6:76:30:ce:d2:11:26:b6:1f:b9:
69:11:08:df:1d:96:75:53:64:60:b9:14:56:44:b1:
70:41:d3:8d:02:50:4c:57:4f:10:2f:1f:29:de:ed:
45:2a:ca:d8:17:43:22:ec:c2:2b:d5:c0:42:33:f6:
df:0d:d5:cd:ee:f9:fb:c4:77:ba:d6:70:67:1b:5e:
f1:84:a6:63:9a:ad:7c:7f:c9:d4:1b:13:6e:f2:51:
d3:e4:89:4f:eb:dd:fc:65:b7:f0:99:c1:97:f0:ad:
78:f1:0d:67:50:0c:cf:bc:5a:18:8c:33:61:ac:5c:
4b:5f:78:06:bf:f0:db:d9:d5:00:33:e9:fd:1d:0a:
35:4d:63:19:46:33:a0:f1:6d:3b:66:e9:6c:7c:72:
e1:fb:ec:02:f4:16:83:66:86:b3:65:de:3d:9a:ef:
4e:5b:f0:67:d4:7b:85:72:c3:ca:3b:68:20:6b:47:
bd:13:f8:31:e2:b3:38:10:86:7c:37:24:73:7c:a8:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7F:87:F5:E0:F4:12:89:80:0E:67:80:3A:F8:A1:0E:47:9B:C1:6A
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4a:24:05:1b:86:1c:62:7b:22:ba:f7:10:83:03:74:70:ad:
d4:5b:29:a2:91:41:20:b6:f9:70:ff:13:d8:3b:08:b8:65:5a:
3f:e9:80:cc:be:0e:4e:a6:f3:ef:84:78:5f:ce:3e:2f:c3:c5:
d3:ed:c6:ba:0b:f4:6b:5c:01:01:9f:95:b1:dc:b7:00:44:10:
99:d1:63:eb:40:41:d2:53:69:e0:65:8a:5e:31:e5:41:8a:0b:
33:78:c6:c2:6e:49:f2:27:9f:52:4d:43:7a:c2:6d:36:63:41:
2c:4e:b5:bb:b4:25:4b:b8:ee:94:4f:07:bd:b1:c7:6f:fd:9e:
b0:77:1e:2f:2a:58:83:70:2e:1c:3f:b3:e7:26:04:93:10:8a:
0f:61:71:d0:de:13:ab:02:9a:57:db:fc:21:42:7b:47:20:f7:
79:be:01:e8:84:44:45:ca:80:50:63:4f:91:c8:81:ee:79:d1:
6f:79:3e:25:61:6f:e0:b5:24:1a:c0:79:67:fc:b3:76:38:7c:
5f:a8:fa:1e:29:89:f2:7a:65:a5:c5:26:11:29:9f:d3:79:f5:
f6:e5:fa:10:75:c1:7d:29:3f:12:16:22:ef:2e:e7:3c:5c:9a:
aa:82:ff:52:7d:68:52:0d:11:60:41:66:23:6a:b3:f4:59:45:
2f:59:04:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:51 2025 by rpki-client